Struct AuthContext 

pub struct AuthContext {
    pub token_id: TokenId,
    pub scope: TokenScope,
}

Per-request authentication context inserted into axum::http::Extensions by crate::middleware::bearer_auth after a successful auth check.

Downstream middleware (rate limiting, audit logging) and route handlers (tenant-scope authorization) consume this rather than re-parsing the Authorization header.

Fields

token_id: TokenId

Stable identifier for the authenticated bearer token. See TokenId.

scope: TokenScope

Tenants this token is authorised to address. Populated by the bearer auth middleware from the parsed crate::token_scope::ParsedTokens map. Dev-mode contexts default to TokenScope::all.

Handlers that bind to a tenant call AuthContext::authorize_tenant before doing per-tenant work.

Implementations

impl AuthContext

pub fn for_token(token: &str) -> Self

Construct an AuthContext for a successfully-authenticated token, defaulting the scope to wildcard. Retained as a back-compat helper for tests that pre-date scoped tokens; production code goes through AuthContext::with_scope.

pub fn with_scope(token: &str, scope: TokenScope) -> Self

Construct an AuthContext with an explicit scope.

pub fn dev() -> Self

Construct the dev-mode pass-through context. Dev mode always grants the wildcard scope — the operator already opted out of auth by leaving the allowlist empty, so per-tenant gating would be theatre.

pub fn authorize_tenant(&self, tenant: TenantId) -> Result<(), ApiError>

Return Ok(()) if this token may address tenant, otherwise an ApiError with kind: "tenant_scope_denied". Routes that bind to a tenant call this before doing any per-tenant work.

Trait Implementations

impl Clone for AuthContext

fn clone(&self) -> AuthContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.